add data.archive_file so the checksums are present at plan stage

Author: jindraj

modules/oidc/callback.tf

@@ -1,4 +1,11 @@
 # Callback Lambda
+data "archive_file" "callback_lambda_zip" {
+  count       = local.enabled ? 1 : 0
+  type        = "zip"
+  source_file = "${path.module}/lambda/callback/index.js"
+  output_path = "${path.module}/lambda/callback.zip"
+}
+
 resource "archive_file" "callback_lambda_zip" {
   count       = local.enabled ? 1 : 0
   type        = "zip"
@@ -12,8 +19,8 @@ resource "aws_lambda_function" "oidc_callback" {
   role             = aws_iam_role.lambda_oidc[0].arn
   handler          = "index.handler"
   runtime          = "nodejs22.x"
-  filename         = resource.archive_file.callback_lambda_zip[0].output_path
-  source_code_hash = resource.archive_file.callback_lambda_zip[0].output_base64sha256
+  filename         = data.archive_file.callback_lambda_zip[0].output_path
+  source_code_hash = data.archive_file.callback_lambda_zip[0].output_base64sha256
   publish          = true
 
   environment {

modules/oidc/edge.tf

@@ -1,4 +1,20 @@
 # Edge Lambda
+data "archive_file" "edge_lambda_zip" {
+  count       = local.enabled ? 1 : 0
+  type        = "zip"
+  output_path = "${path.module}/lambda/edge_auth.zip"
+
+  source {
+    filename = "index.js"
+    content  = file("${path.module}/lambda/edge_auth/index.js")
+  }
+
+  source {
+    filename = "config.json"
+    content  = local.oidc_config_json
+  }
+}
+
 resource "archive_file" "edge_lambda_zip" {
   count       = local.enabled ? 1 : 0
   type        = "zip"
@@ -22,8 +38,8 @@ resource "aws_lambda_function" "edge_auth" {
   role             = aws_iam_role.lambda_oidc[0].arn
   handler          = "index.handler"
   runtime          = "nodejs22.x"
-  filename         = resource.archive_file.edge_lambda_zip[0].output_path
-  source_code_hash = resource.archive_file.edge_lambda_zip[0].output_base64sha256
+  filename         = data.archive_file.edge_lambda_zip[0].output_path
+  source_code_hash = data.archive_file.edge_lambda_zip[0].output_base64sha256
   publish          = true
 
   tags = var.tags